Auditing in Kubernetes 101
summary
Covers Kubernetes audit logging: what audit logs record and how to use them to track who did what and when in a cluster. Presents policy configuration examples that balance performance and accountability to enforce security best practices, detect misuse, and improve compliance, and includes a demo of enabling auditing and inspecting logs, plus planned future improvements and how to contribute feedback.
AI-written summary · about
chapters (19)
- 0:00Start
- 1:46Logs from the Pod X
- 3:05WHAT HAPPENED
- 3:46ON WHAT DID IT HAPPEN
- 4:21WHO DID IT
- 5:28LET'S CONTROL THE
- 6:16AUDIT POLICY
- 8:35WHAT TO LOG
- 9:17LEVELS
- 12:51BACKEND
- 14:17BATCHING
- 16:00DYNAMIC AUDIT CONFIGURATION
- 17:01SECURITY
- 19:24TOO MUCH INFORMATION
- 20:32LOG COLLECTOR PATTERNS
- 22:29UNDERSTANDING K8S INTERNALS
- 22:53TROUBLESHOOTING ISSUES
- 23:12PERFORMANCE ISSUES
- 23:29CONCLUSION
related talks
25mAuditing in Kubernetes 101
19mAuditing Kubernetes Users: Tracking Security Holes
35mUsing K8s Audit Logs to Secure Your Cluster
33mWho Shot the Cluster? - Audit Logging in Kubernetes - Marian Lobur & Mik Vyatskov, Google
36mMaking the Most Out of Kubernetes Audit Logs
34mKubernetes Security 101: Best Practices to Secure Your Cluster
05m⚡Lightning Talk: Learning Kubernetes From Logs: Building a Foundation for Future…
10mA Simple and Practical Guide to Obser...